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Amendments to the claims: 

1-39. (Canceled) 

40. (Currently amended) A method for a service provider to provide services to a 
plurality of client computers , the method comprising: 

providing a first set of services on a first set of one or more servers of the service provider 
to the plurality of client computers by providing secure access to the first set of one or more servers 
by the plurality of client computers, but prohibiting secure access to the plurality of client 
computers by the first set of one or more servers; and 

providing a second set of services on a second set of one or more servers of the service 
provider to the plurality of client computers by providing secure access to the plurality of client 
computers by the second set of one or more servers, but prohibiting secure access to the second set 
of one or more servers by the plurality of client computers. 


securely accessing resources in a first set of one or more servers by one < 
computer networks, said first sot of one or more servers providing a first sot of si 


; client computer networks; and 

socuroly accossing rosourcos in said ono or moro cliont computer networks by a second sot 
or more servers, said second set of one or more servers providing a second set of services to 


3 cliont computer networks. 


41 . (Currently amended) The method of claim 40 wherein said first set of ono or more 
services comprise data services. 

42. (Currently amended) The method of claim 41 wherein said second set of one or 
moro services comprise management and configuration services. 

43. (Previously presented) The method of claim 41 wherein said first set of services 
comprises at least one service selected from the group consisting of: virus protection services, 
remote access, backup, software sharing, and telephony services. 
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44. (Previously presented) The method of claim 42 wherein said second set of services 
comprises at least one service selected from the group consisting of: security, password 
management, software updates, software distribution, and access control. 

45. (Currently amended) The method of claim 40 further comprising: 

preventing any said client computer network from securely accessing resources in any other 
said client computer network . 

46. (Canceled). 

47. (Currently amended) The method of claim [[40]] 42 further comprising: 
providing secure access to the first set of one or more servers by the second set of one or 

more servers. 

preventing any said client computer from securely accessing resources in said second set of 


48. (Previously presented) The method of claim 42 further comprising: 
preventing said first set of one or more servers from securely accessing resources in said 

second set of one or more servers. 

49. (Previously presented) The method of claim 42 wherein said first set of one or more 
servers providing said data services and said second set of one or more servers providing said 
management and configuration services are separate. 

50. (Previously presented) The method of claim 40 further comprising: 
connecting said first set of one or more servers to at least one of the group consisting of: the 

Internet, a public switched telephone network, and a data network. 
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5 1 . (Currently amended) An apparatus, A system for providing services to a plurality 
of client computers, the system comprising: 

a first set of one or more servers for providing a first set of services to the plurality of client 
computers by providing secure access to the first set of one or more servers by the plurality of client 
computers, but prohibiting secure access to the plurality of client computers by the first set of one 
or more servers; and 

having resources that are securely accessed by one or more client computer networks, 
wherein said first set of one or more servers is operable to provide a first set of services to said one 
or more client computer networks; and 

a second set of one or more servers for providing a second set of services to the plurality of 
client computers by providing secure access to the plurality of client computers by the second set 
of one or more servers, but prohibiting secure access to the second set of one or more servers by the 
plurality of client computers. 

that securely accesses resources in the one or more computer networks, wherein said 
second sot of one or more servers is operable to provide a second sot of services to said one or more 
client computer networks. 

52. (Currently amended) The apparatus system of claim 5 1 wherein said first set of ene 
or moro services comprise data services. 

53. (Currently amended) The apparatus system of claim 52 wherein said second set of 
one or more services comprise management and configuration services. 

54. (Currently amended) The apparatus system of claim 52 wherein said first set of 
services comprises at least one service selected from the group consisting of: virus protection 
services, remote access, backup, software sharing, and telephony services. 
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55. (Currently amended) The apparatus system of claim 53 wherein said second set of 
services comprises at least one service selected from the group consisting of: security, password 
management, software updates, software distribution, and access control. 

56. (Currently amended) The apparatus system of claim 5 1 wherein said apparatus 
system is operable to: 

prevent any said client computer network from securely accessing resources in any other 
said client computer network . 

57. (Canceled). 

58. (Currently amended) The system of claim 53 wherein the system is operable to 
provide secure access to the first set of one or more servers by the second set of one or more 
servers. 

apparatus of claim 51 wherein said apparatus is operable to: 

prevent any said client computer from securely accessing resources in said second set of 


59. (Currently amended) The apparatus system of claim 53 wherein said apparatus 
system is operable to: 

prevent said first set of one or more servers from securely accessing resources in said 
second set of one or more servers. 

60. (Currently amended) The apparatus system of claim 53 wherein said first set of one 
or more servers providing said data services and said second set of one or more servers providing 
said management and configuration services are separate. 

6 1 . (Currently amended) The apparatus system of claim 5 1 wherein said first set of one 
or more servers is connected to at least one of the group consisting of: the Internet, a public 
switched telephone network, and a data network. 
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62. (New) A method for a service provider to provide services to a plurality of client 
computers, the method comprising: 

separating the services provided by the service provider into a first group of services 
provided by a first group of one or more servers of the service provider, and a second group of 
services provided by a second group of one or more servers of the service provider; 

providing the first set of services from the first set of servers through a one-way trust 
connection from the first set of servers to the client computers; and 

providing the second set of services from the second set of servers to the client computers 
through a one-way trust connection from the client computers to the second set of servers. 

63. (New) The method of claim 62 further comprising: 

preventing any said client computer from gaining secure access to any other said client 
computer. 

64. (New) The method of claim 62 wherein said first set of services comprises at least 
one service selected from the group consisting of: virus protection services, remote access, backup, 
software sharing, and telephony services. 

65. (New) The method of claim 62 wherein said second set of services comprises at 
least one service selected from the group consisting of: security, password management, software 
updates, software distribution, and access control. 

66. A method for providing services from a service provider to a plurality of client 
computers, the method comprising: 

enabling a first set of services on a first set of servers of the service provider through a 
one-way trust connection from the first set of servers to the plurality of client computers; 
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enabling a second set of services on a second set of servers of the service provider to the 
plurality of client computers through a one-way trust connection from the client computers to the 
second set of servers; and 

providing the first and second sets of services. 

67. (New) A system for providing services to a plurality of client computers, the system 
comprising: 

a first set of servers for providing a first set of services to the plurality of client computers 
through a one-way trust relationship from the first set of servers to the plurality of client computers; 
and 

a second set of servers for providing a second set of services to the plurality of client 
computers through a one-way trust relationship from the plurality of client computers to the second 
set of servers. 
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